Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: zDMWtacKaGYBUJC5WcWXgq4bRCqN5e2KcdKTOJnDwUY=
Subject key identifier: E0:B8:D1:E0:04:6B:3D:4B:74:48:25:79:02:BE:1A:83:FE:38:DD:8A
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019922C377E8211B4CBD6647CD87953B695D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 03A3
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: MHkcUq8s96ep0pdNdwp8SP2Aw8O71NEIeP/0mriFQD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:77:e8:21:1b:4c:bd:66:47:cd:87:95:3b:69:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=e0b8d1e0046b3d4b7448257902be1a83fe38dd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:5a:ee:0e:ed:bb:eb:21:73:6c:bc:38:83:
87:15:2c:5d:5e:2d:72:72:21:9c:a7:a2:a0:79:e6:
85:bb:1d:77:e9:23:45:69:f2:33:9a:b8:1d:7c:7a:
21:e6:ba:cd:d3:42:9c:bb:fb:13:44:1c:7c:42:3f:
9f:3a:55:65:ac:7e:1b:bd:e3:f1:d8:27:c0:e3:3a:
9f:b5:5f:b4:7a:f7:bb:ff:c5:1d:f7:9b:01:f4:a4:
e8:53:d7:61:d6:b2:2f:5d:84:3c:ce:8e:43:b7:8a:
b2:91:f0:80:4a:7f:d9:2a:9a:80:87:70:fa:cf:1b:
c6:70:86:54:fb:f8:fc:e9:a7:8e:53:20:c7:37:29:
5f:35:2d:94:3a:d3:1f:49:dc:58:11:f6:6f:c3:01:
2f:6e:e4:cf:8f:2a:14:ee:ef:a9:74:76:e9:e2:30:
31:5a:aa:fe:f1:71:c8:78:90:07:c4:d7:d6:97:d0:
68:dc:5c:f9:6b:03:3b:90:91:12:fa:23:71:ea:5e:
34:df:a1:01:4e:82:ec:1e:ec:48:c4:fa:e3:0b:8e:
8a:b5:40:58:89:78:99:1c:b3:6a:a0:58:d5:7e:1f:
6c:14:3b:ba:4c:9e:f3:63:26:f6:6a:a3:95:b2:17:
72:61:bd:25:17:1c:19:6b:dd:03:4d:de:71:13:57:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:D1:E0:04:6B:3D:4B:74:48:25:79:02:BE:1A:83:FE:38:DD:8A
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:1d:da:f0:4b:2e:c8:48:3b:65:1f:aa:21:de:2b:c7:09:
56:6e:3f:e0:4b:9e:ec:96:90:c7:aa:c0:e5:56:54:27:f1:48:
87:98:08:e7:57:fd:0a:96:7c:6e:af:41:74:db:e8:d6:f7:aa:
e0:a7:19:bb:6b:1d:75:4b:c3:c9:10:4a:82:19:3a:98:ee:0f:
71:f1:a5:5c:d8:3a:da:e2:99:41:d2:bf:db:5b:81:3b:8f:b9:
d4:5e:a0:77:06:cc:c9:5b:a3:ac:6d:81:18:ad:98:e5:38:b9:
55:28:7d:a4:f1:0e:3d:fd:44:33:b1:60:46:2f:34:63:85:5b:
0a:b6:e9:fb:a4:e1:78:94:ca:b3:c8:90:c1:00:48:22:e3:29:
d7:2d:ae:f8:81:42:4b:9a:d9:f7:f7:7b:4b:92:65:f1:b8:85:
cb:9b:76:95:a1:16:bd:2e:75:47:4d:bd:fc:da:8f:40:52:63:
c3:b1:07:24:87:ca:8b:d8:58:cf:2d:1a:ef:f1:c1:09:18:63:
eb:d1:2a:28:c1:75:b0:a0:08:db:86:79:ce:9e:9d:32:b9:34:
7a:19:0c:78:e8:67:01:6c:c6:a7:36:8e:62:13:ab:cd:7d:e7:
e8:b7:1f:84:24:93:15:0a:34:90:01:67:1c:27:3a:25:23:d9:
62:d3:85:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw3foIRtMvWZHzYeVO2ldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjhhY2M5ZDZlYTgzNDIxNDEzZTRjZjVhMDczN2ZhYzMx
NzM1MmEwHhcNMjUwOTA3MDYwMDU5WhcNMjUwOTA4MDYwMDU5WjAzMTEwLwYDVQQD
EyhlMGI4ZDFlMDA0NmIzZDRiNzQ0ODI1NzkwMmJlMWE4M2ZlMzhkZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr1a7g7tu+shc2y8OIOHFSxdXi1y
ciGcp6KgeeaFux136SNFafIzmrgdfHoh5rrN00Kcu/sTRBx8Qj+fOlVlrH4bvePx
2CfA4zqftV+0eve7/8Ud95sB9KToU9dh1rIvXYQ8zo5Dt4qykfCASn/ZKpqAh3D6
zxvGcIZU+/j86aeOUyDHNylfNS2UOtMfSdxYEfZvwwEvbuTPjyoU7u+pdHbp4jAx
Wqr+8XHIeJAHxNfWl9Bo3Fz5awM7kJES+iNx6l4036EBToLsHuxIxPrjC46KtUBY
iXiZHLNqoFjVfh9sFDu6TJ7zYyb2aqOVshdyYb0lFxwZa90DTd5xE1eQ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC40eAEaz1LdEgleQK+GoP+ON2KMB8GA1UdIwQY
MBaAFA1orMnW6oNCFBPkz1oHN/rDFzUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQt
NGU0YTUwNjU1OTRhLzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQtNGU0YTUwNjU1OTRh
LzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTkd2vBL
LshIO2UfqiHeK8cJVm4/4Eue7JaQx6rA5VZUJ/FIh5gI51f9CpZ8bq9BdNvo1veq
4KcZu2sddUvDyRBKghk6mO4PcfGlXNg62uKZQdK/21uBO4+51F6gdwbMyVujrG2B
GK2Y5Ti5VSh9pPEOPf1EM7FgRi80Y4VbCrbp+6TheJTKs8iQwQBIIuMp1y2u+IFC
S5rZ9/d7S5Jl8biFy5t2laEWvS51R029/NqPQFJjw7EHJIfKi9hYzy0a7/HBCRhj
69EqKMF1sKAI24Z5zp6dMrk0ehkMeOhnAWzGpzaOYhOrzX3n6LcfhCSTFQo0kAFn
HCc6JSPZYtOFeA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:11 2025 by rpki-client